Back
American Express logo

AI Security Engineer III - Agentic AI & Security Automation

American Express · Posted Nov 2

Banking, credit card, payment network, and travel services

Bengaluru, KA, IndiaFull-timeHybridMid Level2–4 years₹28.0L–₹45.0L yearly65 applicants
BankingPaymentsCredit CardsFinancial ServicesPublic Company
Be an early applicantFull time

Get a personal compatibility score

Add a resume for personal matches

About the role

The role sits within American Express cybersecurity, focused on building AI-powered solutions that transform traditional security processes through intelligent automation, agentic AI, and secure software engineering. The engineer will develop autonomous and semi-autonomous AI agents to identify, analyze, correlate, and prioritize vulnerabilities and to automate remediation across application code, APIs, dependencies, container images, and cloud environments. Work also spans cryptographic metadata, automated assurance, and lifecycle visibility, using Python, LLMs, REST APIs, and GitHub automation.

What you will do

  • AI Agent Development & Innovation: Design, develop, and deploy intelligent AI agents using LLMs, agentic AI frameworks, retrieval-augmented generation (RAG), tool/function calling, and workflow orchestration to automate vulnerability management and cryptographic security processes.
  • AI-Driven Vulnerability Detection & Remediation: Develop AI-powered solutions to analyze application code, GitHub repositories, dependencies, APIs, and container images; identify security vulnerabilities; generate secure remediation recommendations; and automate code and dependency fixes.
  • Automated Code Fixes & GitHub Integration: Build intelligent agents capable of generating remediation code, updating vulnerable dependencies, executing automated tests and security validations, and creating GitHub pull requests for application owner review and approval.
  • Intelligent Workflow Automation: Implement automated pull request monitoring, application owner notifications, remediation tracking, and escalation workflows. For example, trigger configurable email or collaboration-tool reminders when remediation pull requests remain unreviewed or unmerged beyond defined thresholds, such as 24 hours.
  • AI-Driven Vulnerability Triage & Correlation: Develop AI-powered workflows to correlate findings, security scanners, and application repositories; identify potential duplicate or stale findings; analyze severity reclassifications; and distinguish actionable vulnerabilities from reporting discrepancies.
  • Automated Remediation Validation: Develop workflows to validate remediation effectiveness through automated testing, security rescans, deployment verification, and vulnerability status reconciliation. Ensure findings are accurately tracked through remediation and closure.
  • Cryptographic Metadata & Discovery: Develop AI-powered capabilities to discover cryptographic algorithms, certificates, keys, libraries, configurations, and dependencies across applications and repositories, improving inventory accuracy and risk visibility.
  • Automated Cryptographic Assurance: Build intelligent solutions that evaluate cryptographic implementations against enterprise security policies, identify noncompliant configurations, assess cryptographic risks, and recommend remediation actions.
  • Cryptographic Lifecycle Intelligence: Develop proactive monitoring and AI-driven workflows to identify expiring certificates, deprecated algorithms, key rotation requirements, and cryptographic migration opportunities.
  • Security Platform & API Integration: Integrate AI agents with GitHub APIs, vulnerability APIs, AI Harness assessment results, vulnerability management platforms, and enterprise security tools to automate security analysis, risk prioritization, remediation workflows, and reporting.
  • AI-Powered Security Insights & Reporting: Develop automated dashboards, vulnerability trend analysis, risk prioritization, remediation recommendations, and application owner notifications using findings from multiple security data sources. Enable visibility into new vulnerabilities, severity reclassifications, remediation progress, and outstanding security risks.
  • AI Agent Reliability & Security Controls: Implement secure AI agent workflows with appropriate human approval, least-privilege access, audit logging, input/output validation, and safeguards against prompt injection or unauthorized actions. Evaluate AI-generated remediation recommendations for correctness, security, and reliability before implementation.
  • Engineering & Collaboration: Write maintainable, reusable, and well-tested Python code; develop scalable automation components; integrate solutions into CI/CD pipelines; and collaborate with security engineering, application development, DevSecOps, and infrastructure teams to deploy reliable AI-driven security solutions.

Skills used in this role

What the employer is looking for

  • Bachelor's degree in Computer Science, Software Engineering, Cybersecurity, Artificial Intelligence, or a related field, or equivalent practical experience.
  • 2–4 years of hands-on experience in software development, automation engineering, DevSecOps, security engineering, or related technical roles.
  • Strong programming skills in Python, including scripting, REST API integrations, JSON processing, data manipulation, error handling, automated testing, and development of reusable automation components.
  • Practical experience developing applications or automation solutions using Generative AI and Large Language Models (LLMs), including prompt engineering, tool/function calling, structured outputs, and AI agent workflows.
  • Familiarity with AI agent frameworks and orchestration technologies such as LangChain, LangGraph or equivalent frameworks.
  • Experience working with GitHub, Git workflows, pull requests, repository automation, and CI/CD pipelines.
  • Understanding of software security fundamentals, vulnerability identification, secure coding practices, dependency management, and vulnerability remediation workflows.
  • Working knowledge of common application security vulnerabilities and remediation approaches involving APIs, open-source dependencies, container images, and application code.
  • Familiarity with security scanning tools, vulnerability management platforms, or CTEM concepts, including vulnerability prioritization, risk scoring, remediation tracking, and validation.
  • Experience with REST API integrations, scheduled automation, event-driven workflows, and integration of multiple enterprise systems.
  • Understanding of secure software development practices, including code reviews, unit testing, automated security testing, and deployment validation.
  • Awareness of AI application security considerations, including prompt injection, sensitive-data handling, least-privilege access, human-in-the-loop approval, and validation of AI-generated outputs.
  • Basic knowledge of cryptographic security concepts, including encryption algorithms, TLS, digital certificates, cryptographic libraries, and key management.
  • Strong analytical, troubleshooting, and problem-solving skills, with the ability to translate cybersecurity requirements into practical engineering and automation solutions.
  • Ability to collaborate effectively with cross-functional engineering, application development, DevSecOps, and cybersecurity teams.

Benefits and support

  • Competitive base salaries
  • Bonus incentives
  • Support for financial-well-being and retirement
  • Comprehensive medical, dental, vision, life insurance, and disability benefits (depending on location)
  • Flexible working model with hybrid, onsite or virtual arrangements depending on role and business need
  • Generous paid parental leave policies (depending on your location)
  • Free access to global on-site wellness centers staffed with nurses and doctors (depending on location)
  • Free and confidential counseling support through our Healthy Minds program
  • Career development and training opportunities

About American Express

American Express logo

American Express

Company website
LinkedInXCrunchbaseGlassdoor★4.1

American Express Company is a globally recognized multinational financial services corporation specializing in payment cards, travel-related services, and network banking. Founded in 1850, the company provides charge and credit cards, expense management products, and merchant services to consumers, small businesses, and large corporations worldwide. It operates a proprietary payments network known for its premium customer engagement and lifestyle rewards programs.

Industry
Banking
Company size
76800 employees
Founded
1850-03-18
Location
New York City, New York, USA
Funding stage
Public Company

Leadership

SJ
Stephen J. Squeri

Chairman and Chief Executive Officer

CL
Christophe Le Caillec

Chief Financial Officer

RR
Ravi Radhakrishnan

Chief Information Officer and Executive Vice President

MR
Monique R. Herena

Chief Colleague Experience Officer

ER
Elizabeth Rutledge

Chief Marketing Officer

Recent coverage

Apply